In the Specification 

Please replace the paragraph beginning at line 19 on page 8 with the following 
marked up paragraph: 

~ A firewall configuration method 220 illustrated in FIG. 2B is invoked to determine 
what security policy to apply to network traffic through the network adapters installed in 
the client computer. The method 220 reads a policy file containing the policies, zones, 
and assignments at block 304-221. An exemplary embodiment of a policy file is described 
further below. The method 220 loops through all the network adapters on the computer 
(block 223 through block 231), determining the network address of each (block 225) and 
the zone to which the network address belongs (block 227). The method 220 associates 
the adapter with the security policy assigned to the zone (block 229).-- 

Please replace the paragraph beginning at line 9 on page 9 with the following 
marked up paragraph: 

- The processing represented by block 225 depends on the operating system executing on 
the computer. For example, in a computer executing Microsoft Windows NT or 
Windows 2000, the network adapters installed on the computer and their current network 
addresses are stored in an operating system registry. Thus, in one embodiment for 
Windows NT/2000, the method 200 maps each adapter registry identifier to its network 
address in another section of the registry. The Windows 95 and Windows 98 registries do 
not have similar entries for installed network adapters. Therefore, in one Windows 9x 
embodiment, the processing at block 225 monitors network traffic and examines the 
initial network traffic for each adapter to determine the network address. Embodiments 
for other operating systems may invoke standard system calls at block 225 to determine 
the network address. In an alternate embodiment of method 220 not shown, the adapter 
device drivers would be modified to invoke and send a network addresses to the method 
220 when the corresponding adapter connects to a network.— 

Please replace the paragraph beginning at line 15 on page 14 with the following 
marked up paragraph: 
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- FIG. 4B shows one example of a conventional computer system that can be used as a 
client computer system or a server computer system or as a web server system. It will 
also be appreciated that such a computer system can be used to perform many of the 
functions of an Internet service provider, such as ISP 5. The computer system 51 
interfaces to external systems through the modem or network interface 53. It will be 
appreciated that the modem or network interface 53 can be considered to be part of the 
computer system 51. This interface 53 can be an analog modem, ISDN modem, cable 
modem, token ring interface, satellite transmission interface (e.g. "Direct PC"), radio 
frequency (RF), cellular, or other interfaces for coupling a computer system to other 
computer systems. The computer system 51 includes a processing unit 55, which can be 
a conventional microprocessor such as an Intel Pentium microprocessor or Motorola 
Power PC microprocessor. Memory 59 is coupled to the processor 55 by a bus 57. 
Memory 59 can be dynamic random access memory (DRAM) and can also include static 
RAM (SRAM). The bus 57 couples the processor 55 to the memory 59 and also to non- 
volatile storage^e65 and to display controller^ 1 and to the input/output (I/O) controller 
x67. The display controller-^61 controls in the conventional manner a display on a 
display device-^63 which can be a cathode ray tube (CRT) or liquid crystal display. The 
input/output devices^e69 can include a keyboard, disk drives, printers, a scanner, and 
other input and output devices, including a mouse or other pointing device. The display 
controller-^ 1 and the I/O controller*67 can be implemented with conventional well 
known technology. A digital image input device-^61 can be a digital camera which is 
coupled to an I/O controller-*67 in order to allow images from the digital camera to be 
input into the computer system 51. The non- volatile storage-^e65 is often a magnetic hard 
disk, an optical disk, or another form of storage for large amounts of data. Some of this 
data is often written, by a direct memory access process, into memory 59 during 
execution of software in the computer system 5 1 . One of skill in the art will immediately 
recognize that the term "computer-readable medium" includes any type of storage device 
that is accessible by the processor 55 and also encompasses a carrier wave that encodes a 
data signal.— 
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